DOMINION CITY BREWING CO.

Privacy Policy

Effective date: August 27, 2026        Last updated: August 27, 2026        Version: 2.0

This policy replaces all previous versions. 

1. About this policy

Dominion City Brewing Co. ("Dominion City", "we", "us", "our") respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.

It applies to www.dominioncity.ca, our mobile application, our email and text message programs, our loyalty and subscription programs, and our social media pages. It does not apply to personal information about our employees or job applicants, which we handle separately.

This policy is written to meet the requirements of:

• The Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to our commercial activities across Canada;

• The Act respecting the protection of personal information in the private sector (Quebec), as amended by Law 25, to the extent we collect personal information about individuals located in Quebec, including visitors to this website;

• Canada's Anti-Spam Legislation (CASL), which governs our email and text message marketing.

"Personal information" means any information about an identifiable individual. Information that has been anonymized in accordance with generally accepted best practices, so that it no longer allows any individual to be identified directly or indirectly, is not personal information and is not covered by this policy.

2. Who is responsible for your personal information

We have designated a Privacy Officer who is responsible for our compliance with privacy law and for handling your requests and complaints.

Privacy Officer: Josh McJannett, Privacy Officer

Email: privacy@dominioncity.ca

Mail: Privacy Officer, Dominion City Brewing Co., 15-5510 Canotek Road, Ottawa, Ontario, K1J 9J4, Canada

Telephone: 613-688-6207

Note for completion: Quebec law requires that the name and title of the person in charge of the protection of personal information be published on our website. Where no one has been expressly designated, the role falls by default to the person exercising the highest authority in the enterprise. Insert that person’s name and title above before publishing, and set up the privacy@ mailbox so it routes to them.

3. What personal information we collect

3.1 Information you give us

• Identity and contact details: name, email address, postal address and telephone number.

• Order and account information: what you bought, your order history, delivery and pickup preferences, your account credentials, and your loyalty and subscription details.

• Payment information: your billing address and card metadata. Full card numbers are handled directly by our payment processors and are not stored on our systems.

• Age verification: confirmation that you are of legal drinking age. We do not retain copies of identification documents.

• Communications: messages you send us by email, through the chat widget on our site, or through social media, and any survey or review responses.

3.2 Information we collect automatically

When you visit our website or use our app, some information is collected automatically:

• Device and connection data: IP address, browser and device type, operating system, and language and regional settings.

• Usage data: pages and products viewed, referring website, searches made on our site, and cart activity.

• Approximate location derived from your IP address, used to set currency, shipping options and regional content. We do not collect precise location from our website, and our mobile app only does so if you grant that permission in your device settings.

• Advertising identifiers assigned to your browser or device by the providers named in section 6.

Except for what is strictly necessary to deliver the site, this collection only happens after you have given consent. See section 5.

3.3 Information we receive from third parties

• Payment processors confirm whether a payment succeeded and provide fraud signals.

• Advertising and analytics partners provide aggregated audience and campaign measurement data.

• Social media platforms provide information you have chosen to make available to us when you interact with our pages or click our ads.

• Delivery partners provide delivery status and confirmation.

3.4 Sensitive information

We do not seek out sensitive personal information.

4. Why we collect it

We collect personal information only for the purposes below. We do not use it for any other purpose without first obtaining your consent.

5. Consent

5.1 How we ask for consent

We ask for your consent separately for each purpose, in plain language, and separately from any other information we give you. We do not treat your continued use of the site as agreement to anything beyond what is strictly necessary to deliver it.

Where we need personal information to complete a transaction you have asked for, to take payment, verify your age and deliver your order, we rely on the consent you give by placing that order, and we use the information only for that purpose.

For anything beyond that such as analytics, advertising, profiling and marketing messages, we ask for your express, opt-in consent first.

5.2 Technology that identifies, locates or profiles you

All technology on our site capable of identifying, locating or profiling you is deactivated by default. It is activated only if and when you choose to activate it, through the privacy preferences control on our site.

5.3 Withdrawing consent

You may withdraw your consent at any time. How to do it depends on what you are withdrawing:

• Cookies and tracking: use the privacy preferences control on our site. You may also clear and block cookies in your browser settings.

• Marketing emails: click "unsubscribe" at the bottom of any email, or email privacy@dominioncity.ca.

• Text messages: reply STOP to any message.

• Everything else: email privacy@dominioncity.ca or write to our Privacy Officer at the address in section 2.

Withdrawing consent does not affect anything we did lawfully before you withdrew it.

6. Cookies and similar technologies

We use cookies and similar technologies - pixels, tags and app software kits - on our website and in our app. Rather than list individual cookie names, which change whenever a provider updates its software, this section describes what each category does, who operates it, and how long it lasts.

Strictly necessary. Required to run the site: holding the contents of your cart, keeping you signed in, setting your currency and language, processing payment and keeping the site secure. Operated by our e-commerce platform, our accelerated checkout provider, our subscription providers if you are a subscriber, and the font providers who deliver the typefaces used on the site and who therefore see your IP address. These last from the length of your visit up to about two weeks. They cannot be switched off, and blocking them in your browser will prevent the store from working.

Functional. Support optional features you have chosen to use: our loyalty program, our live chat (which retains the conversation) and our mobile app. Active only when you use the relevant feature.

Analytics. Tell us how the site is used, which pages and products are viewed, where visitors arrive from, and where people run into difficulty. Operated by Google Analytics and by our e-commerce platform’s own analytics. Retention is set out in section 9. These are off until you give turn them on.

Advertising. Let us and our advertising partners record what you looked at here, combine it with information collected about you elsewhere, build a profile of your likely interests, show you our advertising on other websites and platforms, measure whether it worked, and find other people who resemble our customers. Our advertising partners include, but are not limited to, Google, Meta (Facebook and Instagram), TikTok, Pinterest, and Klaviyo, which links your browsing to your email and text message profile so our marketing can be personalized. Some of them also use the information for their own purposes, which is why we ask before any of it is switched on. These are off until you turn them on.

Your control. Everything except the strictly necessary category is deactivated by default and activates only if you choose to activate it. Use the privacy preferences control on our site to turn categories on or off at any time, including after you have already agreed. The same control lists the individual cookies currently in each category, generated from the site as it stands. You can also block or clear cookies in your browser settings.

If we engage a new advertising or analytics provider, we will update this section and ask for your consent before activating it.

Note for completion: The sentence about the preferences control listing individual cookies is true of most consent platforms, which auto-scan the site, but not of Shopify’s basic built-in banner. Delete it if the banner you deploy does not itemize.

7. Who we share your information with

We do not sell your personal information for money. We share it in the following circumstances only:

8. Transfers outside Quebec and outside Canada

Some of our service providers store or process personal information outside Quebec, and outside Canada, and principally in the United States. This includes the providers named in section 6.

You should understand that once personal information is in another country, it is subject to the laws of that country, and may be accessible to courts, law enforcement and national security authorities there under those laws.

We remain responsible under privacy law for information we transfer to a service provider, and we use contractual means to require a comparable level of protection.

9. How long we keep it

We keep personal information only for as long as necessary for the purpose it was collected, or for as long as the law requires. When that period ends, we destroy it or anonymize it in accordance with generally accepted best practices.

10. How we protect it

We apply security measures appropriate to the sensitivity of the information, including encryption of data in transit, access controls that limit staff access to what each role requires, and written confidentiality and security obligations for our staff and service providers. No system is completely secure. If a confidentiality incident occurs, we take immediate steps to reduce the risk and prevent recurrence, and we assess the risk of injury to the people affected. Where the incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the individuals concerned, and we notify the Privacy Commissioner of Canada where there is a real risk of significant harm. We keep a register of confidentiality incidents as required by law.

11. Your rights

You have the following rights over your personal information. Access is free. Where we charge a reasonable fee for transcription, reproduction or transmission, we will tell you the amount before proceeding so you can withdraw the request.

11.1 How to make a request

Send your request to privacy@dominioncity.ca, or by mail to the Privacy Officer at the address in section 2. Tell us what you are asking for and give us enough information to find your records, usually the email address or name on your account.

We will verify your identity before releasing information. We will respond within 30 days of receiving your request. If we refuse a request in whole or in part, we will tell you in writing why, identify the provision of law we rely on, tell you how to challenge our decision, and give you the time limit for doing so.

12. Age requirements and minors

Our products are for adults of legal drinking age: at least 19 years old in Ontario, and at least 18 in Quebec.

Our website and our marketing are not directed at people under legal drinking age, and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, contact our Privacy Officer and we will delete it.

In any case where we do collect personal information about a minor under 14 we require the consent of the person having parental authority.

13. Third-party websites and social media

Our site links to other websites, including our pages on Facebook, Instagram, TikTok and YouTube. Those sites have their own privacy practices, which we do not control, and this policy does not apply to them. We encourage you to read their policies.

Where we embed a third-party feature in our own site, such as our chat widget, loyalty widget or subscription portal, that feature operates under this policy and the technologies it uses are described in section 6.

14. Changes to this policy

We reserve the right to update this policy from time to time. When we do, we will post the current version here. If we ever want to use personal information we have already collected for a purpose we did not previously disclose, we will ask for your consent before doing so through the privacy preferences control on our site.

15. Questions and complaints

Start with us. Our Privacy Officer will acknowledge your complaint, investigate it, and respond in writing within 30 days.

Privacy Officer, Dominion City Brewing Co.

15-5510 Canotek Road, Ottawa, Ontario, K1J 9J4

privacy@dominioncity.ca  |  613-688-6207

If you are not satisfied with our response, you may contact: